# Auth0 Community Ask Me Anything January 14, 2026: Auth0 for AI Agents

**URL:** <https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183>\
**Category:** Community AMA Series\
**Tags:** ai\
**Created:** [October 14, 2025, 5:31pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183 "2025-10-14T17:31:24Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tiffani](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tiffani/32/75235_2.png) [@Tiffani](https://community.auth0.com/u/Tiffani)\
**Post date:** [October 14, 2025, 5:31pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/1 "2025-10-14T17:31:24Z")

</div>

**UPDATE: AMA DATE CHANGE:** The **Auth0 for AI Agents AMA** is moving to **January 14, 2026,** giving you more time to get hands-on with the tool in [Developer Preview](https://auth0.com/ai).

Dive in today…we can’t wait to read all of your great questions and ideas!

Hi everyone,

Get ready for the next Auth0 Community Ask Me Anything (AMA) session with the team that built [Auth0 for AI Agents](https://auth0.com/ai)!

This is your chance to connect directly with us— We’re excited to answer your questions, from high-level architecture to nitty-gritty implementation details.

Our new solution is currently in [Developer Preview](https://auth0.com/signup?onboard_app=genai&ocid=7014z000001NyoxAAC-aPA4z0000008OZeGAM) and will be Generally Available (GA) November 13th. It’s designed to help you solve the complex identity challenges of the AI era, like:

- How does an AI agent identify the current user?
- What’s the best way for an AI agent to securely connect to a user’s applications and services?
- How do you ensure human-in-the-loop approvals for critical AI agent actions?
- How can you handle token management for long-running agent tasks without compromising security?

**How It Works**

From October 15th through January 13th, 2026, Auth0 developers, customers, and community members are invited to submit their questions about Actions right here in the Auth0 Community. **Just click “Reply” on this [thread](https://community.auth0.com/t/ask-me-anything-coming-soon/193183)**. Then, on January 14th, from 9:00 AM to 11:00 AM PST, our product expert will be online and actively responding with detailed written answers to all questions submitted during the two-week period.

🎉 As a bonus, everyone who participates will earn points and a special community badge!

**Meet Our Featured Experts**

Karim Tantawy, Product Manager

 ![Screenshot 2025-10-29 at 5.25.36 PM](https://global.discourse-cdn.com/auth0/original/3X/c/f/cf3a91ac2fd01943ac611ed60fa1d1eba8a50ab5.png)

Karim Tantawy is a Group Product Manager at Auth0 focusing on making it quick and easy for developers to ship AI agents with built-in auth and security, enabling them to access tools, workflows, and users’ data with fine-grained control. He has over 14 years of experience building and shipping tech products.

Milan Khan, Product Manager

 ![Screenshot 2025-10-29 at 3.25.52 PM](https://global.discourse-cdn.com/auth0/original/3X/3/e/3ee46a6bb390fc55f29ab37162a5ee8ea703403c.png)  
Milan is a Senior Product Manager at Auth0, focusing on building AI Agents that can securely access authorised third-party APIs, act on users’ behalf, and perform sensitive operations with users’ approval. He has over 20 years of industry experience working in identity and security with roles in Professional Services and Product Management.

---

<div class="post-metadata">

**Author:** ![Tiffani](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tiffani/32/75235_2.png) [@Tiffani](https://community.auth0.com/u/Tiffani)\
**Post date:** [October 14, 2025, 5:31pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/2 "2025-10-14T17:31:43Z")

</div>



---

<div class="post-metadata">

**Author:** ![christina.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/christina.johnson/32/58668_2.png) [@christina.johnson](https://community.auth0.com/u/christina.johnson)\
**Post date:** [October 15, 2025, 9:48pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/3 "2025-10-15T21:48:20Z")

</div>



---

<div class="post-metadata">

**Author:** ![christina.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/christina.johnson/32/58668_2.png) [@christina.johnson](https://community.auth0.com/u/christina.johnson)\
**Post date:** [October 15, 2025, 9:55pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/4 "2025-10-15T21:55:32Z")

</div>



---

<div class="post-metadata">

**Author:** ![christina.johnson](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/christina.johnson/32/58668_2.png) [@christina.johnson](https://community.auth0.com/u/christina.johnson)\
**Post date:** [November 10, 2025, 3:05pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/5 "2025-11-10T15:05:55Z")

</div>

Hi! My question is: What’s the best way to handle API keys for agents that need to connect to a user’s Google Calendar or Slack?

---

<div class="post-metadata">

**Author:** ![kristi.davis](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kristi.davis/32/66391_2.png) [@kristi.davis](https://community.auth0.com/u/kristi.davis)\
**Post date:** [November 12, 2025, 3:17pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/6 "2025-11-12T15:17:42Z")

</div>

_How can my agent ask for user approval via a push notification before it does something sensitive, like deleting a file?_

---

<div class="post-metadata">

**Author:** ![milan.boucher](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.boucher/32/74201_2.png) [@milan.boucher](https://community.auth0.com/u/milan.boucher)\
**Post date:** [November 12, 2025, 3:34pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/7 "2025-11-12T15:34:18Z")

</div>

Hello! What are the applications and services I can connect my AI Agents to using Auth0?

---

<div class="post-metadata">

**Author:** ![TechMindFactory](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/techmindfactory/32/77456_2.png) [@TechMindFactory](https://community.auth0.com/u/TechMindFactory)\
**Post date:** [November 15, 2025, 11:36am UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/8 "2025-11-15T11:36:38Z")

</div>

Hello, I assume that I can use both, access and refresh Auth0 tokens to get external IDP token from the Token Vault during the exchange, correct? In the documentation I can only see subject\_token\_type to be Auth0 refresh token. It would be great to get some clarifications here, thank you!

---

<div class="post-metadata">

**Author:** ![cocochanel.quaye](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/cocochanel.quaye/32/76311_2.png) [@cocochanel.quaye](https://community.auth0.com/u/cocochanel.quaye)\
**Post date:** [December 11, 2025, 6:56pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/9 "2025-12-11T18:56:05Z")

</div>

We’re building a “chat with your docs” bot. How do we stop the AI from answering questions using documents the user isn’t allowed to see?

---

<div class="post-metadata">

**Author:** ![moyna.bhattacharya](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/moyna.bhattacharya/32/74201_2.png) [@moyna.bhattacharya](https://community.auth0.com/u/moyna.bhattacharya)\
**Post date:** [December 11, 2025, 10:50pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/10 "2025-12-11T22:50:34Z")

</div>

What specific type of Auth0 Application is recommended for AI Agents?

---

<div class="post-metadata">

**Author:** ![joseauth0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@joseauth0](https://community.auth0.com/u/joseauth0)\
**Post date:** [December 20, 2025, 8:18am UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/11 "2025-12-20T08:18:20Z")

</div>

Hello!!

My question is: How can access control mechanisms be designed to securely manage permissions in a Retrieval-Augmented Generation (RAG) pipeline, ensuring sensitive data isn’t exposed to unauthorized users?

---

<div class="post-metadata">

**Author:** ![Gungz](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gungz/32/77849_2.png) [@Gungz](https://community.auth0.com/u/Gungz)\
**Post date:** [December 20, 2025, 8:50am UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/12 "2025-12-20T08:50:46Z")

</div>

Will you provide more examples in another agent framework on how to do the integration like ADK, strands, CrewAI ?

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [January 8, 2026, 7:50pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/14 "2026-01-08T19:50:39Z")

</div>

Hello everyone!

**We appreciate your participation in the AMA thread by posting a question!**  
Your **AMA Participant** badge will be awarded once the event concludes—stay tuned!

---

<div class="post-metadata">

**Author:** ![milan.khan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.khan/32/77251_2.png) [@milan.khan](https://community.auth0.com/u/milan.khan)\
**Post date:** [January 14, 2026, 2:11pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/15 "2026-01-14T14:11:19Z")

</div>

hey Christina, we recommend using OAuth2 flows and use of access tokens to connect to a user’s accounts and services like Google Calendar or Slack. API Keys are kinda like passwords and come with those same vulnerabilities. Tokens are time bound and scoped to user permissions - so a lot safer. The Auth0 Token Vault can enable you to access your third-party connected accounts.

---

<div class="post-metadata">

**Author:** ![milan.khan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.khan/32/77251_2.png) [@milan.khan](https://community.auth0.com/u/milan.khan)\
**Post date:** [January 14, 2026, 2:15pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/16 "2026-01-14T14:15:48Z")

</div>

Hi - in order to connect to the external IDP you need to request the refresh token from that external IDP e.g. Google.

Once you connect to Google, we receive the Google refresh and access tokens and we store them in the Token Vault.

And once you have done that, then you can exchange an Auth0 access token or Auth0 refresh token for the (third-party) Google access token.

---

<div class="post-metadata">

**Author:** ![milan.khan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.khan/32/77251_2.png) [@milan.khan](https://community.auth0.com/u/milan.khan)\
**Post date:** [January 14, 2026, 2:18pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/17 "2026-01-14T14:18:53Z")

</div>

You can use Auth0 FGA to model documents and user permissions and build a context for the AI LLM that accounts for documents that the user is allowed to see.

---

<div class="post-metadata">

**Author:** ![milan.khan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.khan/32/77251_2.png) [@milan.khan](https://community.auth0.com/u/milan.khan)\
**Post date:** [January 14, 2026, 2:23pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/18 "2026-01-14T14:23:22Z")

</div>

You can configure an API (Resource Server) in Auth0 and then configure it a custom client application for it. See: [Configure Token Vault](https://auth0.com/docs/secure/call-apis-on-users-behalf/token-vault/configure-token-vault#create-custom-api-client)

---

<div class="post-metadata">

**Author:** ![karim.tantawy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/karim.tantawy/32/78080_2.png) [@karim.tantawy](https://community.auth0.com/u/karim.tantawy)\
**Post date:** [January 14, 2026, 2:26pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/19 "2026-01-14T14:26:54Z")

</div>

Hi Milan. We support 30+ integrations with popular services such as Slack, GitHub, Google, Discord, Figma, and Dropbox. Check out the full list here: [Auth0 AI Agent Integrations](https://auth0.com/ai/docs/integrations/overview)

You can also integrate with any service that uses OAuth2 by setting up an OAuth2 connection, details on how to set that up here: [OAuth2 Integration - Auth0 for AI Agents](https://auth0.com/ai/docs/integrations/oauth2)

---

<div class="post-metadata">

**Author:** ![milan.khan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/milan.khan/32/77251_2.png) [@milan.khan](https://community.auth0.com/u/milan.khan)\
**Post date:** [January 14, 2026, 2:30pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/20 "2026-01-14T14:30:08Z")

</div>

Auth0 supports client applications (like agents) to request a user approval using the “client initiated backchannel authentication” (CIBA) protocol. CIBA also allows you to pass in contextual authorisation details. This gives the user to approve a sensitive action and pass that approval back to the agent. The flow supports the Auth0 Guardian push notification based authentication factor.

---

<div class="post-metadata">

**Author:** ![karim.tantawy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/karim.tantawy/32/78080_2.png) [@karim.tantawy](https://community.auth0.com/u/karim.tantawy)\
**Post date:** [January 14, 2026, 2:32pm UTC](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183/21 "2026-01-14T14:32:24Z")

</div>

Hi Gungz. Yes our roadmap includes creating more examples for additional agent frameworks.

In the meantime you can also use our Auth0 AI SDKs with any agent framework. Here is a link to the Python AI SDK: [GitHub - auth0/auth0-ai-python](https://github.com/auth0/auth0-ai-python) . The repository has examples you can check out. If there is a specific agent framework and use case you would like to implement please let us know.

[Next page](https://community.auth0.com/t/auth0-community-ask-me-anything-january-14-2026-auth0-for-ai-agents/193183.md?page=2)
